Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/323830313a38303a333662303a3a2f34382d3438203d3e20323639313931.roa
File:                     323830313a38303a333662303a3a2f34382d3438203d3e20323639313931.roa (raw, json)
Hash identifier:          x9bUzlfTkN2xGB0sAKYappFN70xFTHGd1C3pDtsqWGI=
Subject key identifier:   57:D7:6B:A3:73:FD:6B:B6:C6:8F:BC:59:15:63:20:75:82:0A:E5:AA
Certificate issuer:       /CN=57BDCA715FC67022E897434EC072F285F6D30FB7
Certificate serial:       09C28BB2AB15F601FFD8145C56121411974EAE6B
Authority key identifier: 57:BD:CA:71:5F:C6:70:22:E8:97:43:4E:C0:72:F2:85:F6:D3:0F:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BDCA715FC67022E897434EC072F285F6D30FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/323830313a38303a333662303a3a2f34382d3438203d3e20323639313931.roa
Signing time:             Wed 28 Aug 2024 09:51:30 +0000
ROA not before:           Wed 28 Aug 2024 09:46:30 +0000
ROA not after:            Wed 27 Aug 2025 09:51:30 +0000
asID:                     269191
IP address blocks:        2801:80:36b0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/57BDCA715FC67022E897434EC072F285F6D30FB7.crl
                          rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/57BDCA715FC67022E897434EC072F285F6D30FB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BDCA715FC67022E897434EC072F285F6D30FB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c2:8b:b2:ab:15:f6:01:ff:d8:14:5c:56:12:14:11:97:4e:ae:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BDCA715FC67022E897434EC072F285F6D30FB7
        Validity
            Not Before: Aug 28 09:46:30 2024 GMT
            Not After : Aug 27 09:51:30 2025 GMT
        Subject: CN=57D76BA373FD6BB6C68FBC5915632075820AE5AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:24:fb:ea:a3:0a:7e:41:b9:b9:c9:65:7d:
                    2e:72:53:78:f0:5c:5d:50:a5:2f:d3:6f:82:10:35:
                    c5:1a:db:fc:03:8a:ef:a3:17:b8:30:af:e9:3b:08:
                    04:e0:c5:5b:e6:d3:b5:c7:57:75:75:89:11:02:bc:
                    89:7d:3a:1b:48:d5:f6:64:03:18:5c:9c:84:50:dc:
                    f6:05:45:50:4e:a1:2b:ae:6f:54:8f:45:b7:15:fd:
                    a6:74:89:2c:c8:ee:d5:e1:56:4c:63:ac:f1:d0:ef:
                    6d:cf:66:ca:77:ea:cc:0f:58:ae:40:2a:a9:cc:15:
                    53:23:06:c7:cc:7d:d2:8e:91:84:96:c9:ca:67:09:
                    fe:82:83:36:d5:69:68:6a:dc:88:7f:60:e2:2e:4e:
                    33:d6:07:59:f7:d0:2b:7c:5e:9d:fe:44:49:47:63:
                    36:5e:61:23:13:be:06:0d:54:dd:fd:29:f3:87:a6:
                    f2:b9:5f:04:9b:1c:78:58:2a:df:be:a6:77:ca:dc:
                    cb:c7:4e:62:ab:d6:fd:57:55:f3:99:3d:88:f6:15:
                    57:c2:06:d6:1f:ae:ef:29:7d:e1:21:33:f4:4a:a3:
                    5b:98:61:29:56:2a:96:ab:09:b9:30:07:35:1c:d8:
                    83:44:c1:0c:1b:09:43:86:de:48:68:49:28:39:43:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D7:6B:A3:73:FD:6B:B6:C6:8F:BC:59:15:63:20:75:82:0A:E5:AA
            X509v3 Authority Key Identifier:
                keyid:57:BD:CA:71:5F:C6:70:22:E8:97:43:4E:C0:72:F2:85:F6:D3:0F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/57BDCA715FC67022E897434EC072F285F6D30FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57BDCA715FC67022E897434EC072F285F6D30FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/323830313a38303a333662303a3a2f34382d3438203d3e20323639313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:36b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:22:92:0b:43:40:da:d5:d7:38:e6:4f:50:6e:bc:02:c1:7c:
         da:a6:06:8c:cc:34:df:98:ec:1b:e2:d6:18:11:ef:5c:e9:74:
         3b:ad:2d:11:e2:e7:dc:d4:f3:95:ad:bd:e8:61:e6:35:a9:47:
         0d:80:d6:7a:83:ab:46:e6:49:ad:15:a2:71:1f:10:ed:d5:09:
         a1:bb:88:7c:9e:ee:3a:f0:23:d0:f9:05:03:b3:a9:c7:04:6c:
         4b:18:f2:00:e9:c8:60:17:c1:40:7b:e0:89:c8:b8:38:e1:04:
         a0:9c:c8:dd:02:75:b3:f9:1e:5b:72:7d:13:a2:e0:61:89:71:
         b3:fc:6c:87:e5:eb:fb:eb:65:eb:9b:2e:8d:f4:35:6b:46:33:
         7e:e8:80:96:63:17:ae:2e:a4:19:5b:64:a8:0e:3c:ce:ec:09:
         d6:1d:54:d9:38:a2:34:3d:26:c7:12:50:41:71:06:20:fd:1a:
         3f:48:09:85:91:5b:0f:4c:5b:52:9c:d2:fe:4f:04:bc:ae:ac:
         a5:d2:ab:94:d5:1a:df:f5:f4:67:72:e5:28:e0:78:89:db:2f:
         cf:ae:da:93:6f:57:8a:46:d6:ab:dc:51:49:85:8c:c8:de:f5:
         fe:25:fe:2d:79:e9:f3:75:70:f1:6c:bf:ce:30:e4:e7:b2:c4:
         af:74:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:35 2024 by rpki-client on console-ams.rpki-client.org